Wireshark-users: [Wireshark-users] Filter for DNS tcp flags?
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Scott Baker <scott.baker@xxxxxxxxx>
Date: Thu, 9 Apr 2009 11:02:49 -0700
I want to filter out all DNS queries that fail with a "no such name"
response. As far as I can tell that's tcp flag 0x8583, but I don't
know how to filter for that. The docs say tcp.flags is an 8 bit field,
so it can't be 0x8583. How do I filter DNS for specific flags?

- Scott